From 1d78b7b92d77dd4064164a0f18cc61bbdc1e8753 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Aug 04 2016 09:20:17 +0000 Subject: * Thu Aug 04 2016 Lukas Vrabec 3.13.1-207 - Fix filesystem inteface file, we don't have nsfs_fs_t type, just nsfs_t --- diff --git a/docker-selinux.tgz b/docker-selinux.tgz index 70cf7ea..f5d8bd5 100644 Binary files a/docker-selinux.tgz and b/docker-selinux.tgz differ diff --git a/policy-rawhide-base.patch b/policy-rawhide-base.patch index fa76122..a462cc0 100644 --- a/policy-rawhide-base.patch +++ b/policy-rawhide-base.patch @@ -18093,7 +18093,7 @@ index d7c11a0..6b3331d 100644 /var/run/shm/.* <> -') diff --git a/policy/modules/kernel/filesystem.if b/policy/modules/kernel/filesystem.if -index 8416beb..acf95e0 100644 +index 8416beb..440c63f 100644 --- a/policy/modules/kernel/filesystem.if +++ b/policy/modules/kernel/filesystem.if @@ -631,6 +631,27 @@ interface(`fs_getattr_cgroup',` @@ -20391,10 +20391,10 @@ index 8416beb..acf95e0 100644 +# +interface(`fs_rw_nsfs_files',` + gen_require(` -+ type nsfs_fs_t; ++ type nsfs_t; + ') + -+ rw_files_pattern($1, nsfs_fs_t, nsfs_fs_t) ++ rw_files_pattern($1, nsfs_t, nsfs_t) +') + +######################################## diff --git a/selinux-policy.spec b/selinux-policy.spec index ee1ea02..313bdb5 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -19,7 +19,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.13.1 -Release: 206%{?dist} +Release: 207%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -648,6 +648,9 @@ exit 0 %endif %changelog +* Thu Aug 04 2016 Lukas Vrabec 3.13.1-207 +- Fix filesystem inteface file, we don't have nsfs_fs_t type, just nsfs_t + * Tue Aug 02 2016 Lukas Vrabec 3.13.1-206 - collectd: update policy for 5.5 - Allow puppet_t transtition to shorewall_t